Operations | Monitoring | ITSM | DevOps | Cloud

First-generation security solutions for cloud-native applications have been failing because they apply a legacy mindset where the focus is on vulnerability scanning instead of a holistic approach to threat detection, threat prevention, and remediation. Given that the attack surface of modern applications is much larger than in traditional apps, security teams are struggling to keep up and we’ve seen a spike in breaches.

I am excited to share that we’ve just launched our first open source project called ValidKube. The idea behind Validkube is to fuse together the capabilities of three other popular open-source projects (kubeval, kubectl-neat and trivy by Aqua) and present them in a single view, providing users with a way to ensure YAML code hygiene and security, all at the same time and with just a few clicks of the button.

As enterprise applications changed over time to serve different business needs and computer systems evolved from the monolithic architecture of mainframes into client-server and distributed systems, mechanisms for communications between different tiers of computer systems also had to develop.

This article is based on a true story. The names of the company and people involved were changed to protect the innocent 🙂 . A few weeks ago, we were contacted by a pretty big e-commerce company. We can’t really share their name but, for the purpose of this story, let’s call them “KubeCorp Inc”. They reached out to us following an edge-case incident they had, which resulted in severe downtime.

Kubernetes monitoring involves tracking application performance and resource utilization across cluster components, such as pods, containers, and services. The goal is to gain visibility into the health and security of your clusters. Kubernetes provides built-in features for monitoring, including the resource metrics pipeline that tracks several metrics like node CPU and memory usage and a full metrics pipeline.

When the CTO of this growing company (freshly acquired by a billion-dollar company) contacted me, he was concerned by the ability of his team to deliver what they committed to for the current year. His main issue was 15 engineers working in the same development environment. Can you imagine developing on the same workstation? Things will get worst as they plan to quadruple their engineering team size in the next 18 months.